
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b4e2914-ce83-34d8-b5e7-8af181991f83.roa
File: 2b4e2914-ce83-34d8-b5e7-8af181991f83.roa (raw, json)
Hash identifier: MWuiw+OvbWpkbkwiplfvT/bIYdt3f88DFzrc07EDKlg=
Subject key identifier: D5:E1:6C:96:F2:4C:73:88:EA:F3:66:21:1C:BF:07:DD:05:06:F1:C2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5A01ACAFEF32D15C8F76B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b4e2914-ce83-34d8-b5e7-8af181991f83.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33659
IP address blocks: 73.194.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5a:01:ac:af:ef:32:d1:5c:8f:76:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=898823a3-660f-4023-9ac7-8186c212f234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:5d:d0:bb:85:bd:c2:4d:bb:2f:fe:2b:f9:
c0:08:2e:3e:9e:48:8a:e3:95:26:93:e4:07:e7:24:
f1:61:5b:d1:63:fa:6d:54:e9:0d:67:ec:9f:65:e0:
83:9f:cf:8b:5f:aa:45:8e:14:d3:04:2a:3d:4f:cf:
af:a7:3c:60:bd:b9:19:9c:df:f7:72:e2:b4:76:8c:
6c:c4:a7:dd:5f:44:f9:01:f4:0a:46:2c:05:86:d0:
04:81:91:0e:de:3f:15:a2:c8:58:4c:96:f3:b7:3b:
6a:d4:20:96:66:cd:5a:05:37:be:36:f4:0a:44:45:
a1:d9:c0:88:c9:f8:17:a2:ba:51:50:07:11:4a:db:
7d:9a:43:40:2a:ac:33:73:2f:cf:29:e0:2b:c6:2f:
f6:38:93:a4:a8:3d:82:04:fc:9b:23:2c:2e:92:91:
05:56:a5:a7:14:70:d2:66:7d:cc:37:b3:6b:e1:e5:
22:c6:29:cd:ee:36:ed:4e:63:6f:1d:7f:db:a1:a1:
60:37:c3:cd:8a:8b:cd:9b:2e:ec:ae:51:f8:7a:ce:
80:98:2e:56:2f:f3:5b:8e:92:eb:ca:c1:25:4c:b7:
bb:58:80:94:6f:c6:87:7f:46:8e:ce:c2:7a:28:ee:
76:a6:be:6f:f2:51:42:64:1b:68:d0:dc:27:99:2f:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E1:6C:96:F2:4C:73:88:EA:F3:66:21:1C:BF:07:DD:05:06:F1:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b4e2914-ce83-34d8-b5e7-8af181991f83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.194.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:2e:77:cf:c2:31:61:bd:32:18:76:70:b6:7d:06:6f:32:45:
9f:11:f9:18:76:ec:09:f9:0d:be:2f:15:84:e9:79:6e:38:14:
01:6f:a1:ea:ea:e7:5b:50:5f:80:6a:9e:c2:c5:d2:5b:dd:c1:
6b:45:d1:ff:3d:b7:d3:8d:82:d7:ac:5e:4f:19:03:59:c8:14:
ac:08:c6:d3:f6:56:47:cd:f8:98:95:a4:f5:1d:de:44:5a:78:
3b:cb:6e:bb:00:41:50:33:b0:11:49:9e:a0:3a:85:93:46:e9:
96:b6:43:4e:c1:62:a9:e0:b2:2b:1a:64:b0:50:f6:9c:05:87:
53:ce:ea:f5:c9:86:16:11:5f:1c:ea:7b:2d:f5:04:bd:e2:bb:
43:d0:2b:72:c8:be:8c:f7:92:39:7d:8a:87:30:b8:a2:a8:61:
b3:27:8f:c9:67:88:dd:7a:01:ff:39:ad:c7:5f:d6:54:56:1b:
db:c0:ca:0d:22:ab:8b:0a:02:56:8e:12:e2:79:ff:90:9c:7a:
a7:00:47:f4:3c:92:ce:b1:be:0d:1f:58:cd:31:d6:3d:6d:4e:
86:51:6d:ad:d4:9f:d7:f1:1d:e2:58:d1:cb:41:89:86:dc:bb:
67:b8:a5:f0:f6:55:d2:17:fa:47:bc:7e:cf:d1:b5:29:93:fb:
96:69:4a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:06 2026 by rpki-client